Tuesday, September 28, 2004, 3:48:59 PM, R. Scott Perry [EMAIL PROTECTED] wrote:
Details? Are you seeing the Message OK lines?
Typical log entries:
09/28/2004 15:59:07 Qc28b026d0172aa34 L1 Message OK
RSP Is this with LOG_OK NONE? That line should prevent this log file entry
RSP from
Can STOPALLTESTS be used in place of the weight in the global config?
For example:
SENDERDB ip4r pub.senderdb.net 127.0.0.2 STOPALLTESTS 0
Rick Davidson
National Systems Manager
North American Title Group
-
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
Can STOPALLTESTS be used in place of the weight in the global config?
No, it only applies to filters.
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers
since 2000.
Declude Virus: Ultra reliable virus detection
On 28 Sep 2004 at 16:58, R. Scott Perry wrote:
Scott -
Thanks for pointing that out -- it should be fixed now.
Does this mean we need to do something on our end or retreive an
interim?
Thanks
-Nick
The format
used for the forging virus lookups was changed, and we had to also
make a
Thanks for pointing that out -- it should be fixed now.
Does this mean we need to do something on our end or retreive an
interim?
No, it was entirely on our end.
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers
Hello,
I have a question. I have a test that when a spam message comes
through the filters and not caught, I add the whole /24 IP address range to
a file so that if a message arrives from the IP range again, it's
automatically set to a weight that gets the message forwarded to an e-mail
Anyway, I would like to add the IP addresses of hotmail, etc. so
that if a message comes through from the hotmail servers, I don't
inadvertently block it.
Can I just add a '#' before the IP address to 'rem' it out and
Declude won't block it?
That will work fine -- in that case,
Typical log entries:
09/28/2004 15:59:07 Qc28b026d0172aa34 L1 Message OK
This one should not be appearing if you are using LOG_OK NONE. I have
found the cause of this; it will be fixed in the next release.
09/28/2004 15:59:07 Qc28b026d0172aa34 Subject: MTA
09/28/2004 15:59:07 Qc28b026d0172aa34
A few questions on these new options, the manual states that it will stop
processing the filter or remaining filters but it doesnt say whether or not
it will fail the test that triggers it.
For example if I use
BODY STOPALLTESTS CONTAINS spam verbiage
does the match fail the test triggering
At 9/29/2004 02:34 PM, R. Scott Perry wrote:
09/28/2004 15:59:07 Qc28b026d0172aa34 Subject: MTA
09/28/2004 15:59:07 Qc28b026d0172aa34 From: [EMAIL PROTECTED] To:
[EMAIL PROTECTED] IP: 10.60.213.59 ID:
These are occurring because you are using LOGLEVEL MID. If people think
that LOG_OK NONE
I would have to agree. I think that makes sense except for the debug level.
All others should honor the config line.
Kevin Bilbee
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Elise Lewis
Sent: Wednesday, September 29, 2004 11:49 AM
To: [EMAIL
I promised I read the manual.
I'm wanting to handle mail based on sender name. Particularly I'm
getting considerable spam from coups@ and sender@, among others.
What I am thinking about is:
GLOBAL.CFG
JCFILTERfilter D:\decludefilters\jcfilters.txt x 0 0
$DEFAULT.JUNKMAIL$
JCFILTER
There does seem to be a variety of needs and wants regarding logging.
Scott, could you consider providing configurable logging instead of just
logging levels or some degree of configurable logging within the levels?
As in maybe:
SHOWINLOG MAILFROM
SHOWINLOG RECPT
SHOWINLOG TESTFAILED
etc., etc.,
A few questions on these new options, the manual states that it will stop
processing the filter or remaining filters but it doesnt say whether or
not it will fail the test that triggers it.
For example if I use
BODY STOPALLTESTS CONTAINS spam verbiage
does the match fail the test triggering
Is there a wildcard character that can be used in the Sender Blacklist.
Specifically I would like a character or number wildcard so that I could
blacklist addresses like
spam01.com
spam02.com
with and entry like
spam##.com
so that entries from spam00.com - spam99.com would be caught with one
John,
There is an extra s in the path for the Global.cfg line that would
cause the filter to not be run. This would likely also cause an error
to be logged as well if you wanted to check that out. Everything else
looks like it would do what you were trying to do.
Matt
John Carter wrote:
I
Is there a wildcard character that can be used in the Sender Blacklist.
No, there is not.
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers
since 2000.
Declude Virus: Ultra reliable virus detection and the leader
What would be the possibility of having that function added?
_
Scott Fosseen - Systems Engineer -Prairie Lakes AEA
http://fosseen.us/scott
_
Insanity: doing the
I know that IP4R tests are run first, but is there any order to tests after
that?
In particular, I have two filter files and I'd like to run them in a
particular order -- is that possible?
Elise
Elise Lewis mailto:[EMAIL PROTECTED]
---
[This E-mail scanned for viruses by
great.
Thanks.
At 9/29/2004 04:57 PM, you wrote:
I know that IP4R tests are run first, but is there any order to tests
after that?
In particular, I have two filter files and I'd like to run them in a
particular order -- is that possible?
Declude JunkMail has a specific hard-coded order that
I know that IP4R tests are run first, but is there any order to tests
after that?
In particular, I have two filter files and I'd like to run them in a
particular order -- is that possible?
Declude JunkMail has a specific hard-coded order that test *types* are run
in (for example, all IP4R
Follow-up please.
Where do IPFILE and FromFile tests fit in the running mix?
My guess on the run order is this:
Declude Internal Tests
IP4R
External
Filters
- Original Message -
From: R. Scott Perry [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, September 29, 2004 3:57 PM
Follow-up please.
Where do IPFILE and FromFile tests fit in the running mix?
I believe fromfile test type is first, ipfile test type is second, with
ip4r appearing later, and filters last.
-Scott
---
Declude JunkMail: The advanced anti-spam
It's been a few days since I was working on this and I should have asked
then but got pulled in another direction so this will have kind of vague
proofs.
Does mail going fro muser to user in the same domain (and on the same
system) go through Declude.JunkMail? I was getting indications that is
Thanks, didn't see the typo. I'm going to watch the results for several
days. Just in the last hour or so have caught about 50 msgs and its 100%
spam.
John
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Matt
Sent: Wednesday, September 29, 2004 2:37 PM
Two questions:
1) I'd like a clarify the STOPALLTESTS
action.
IfI had a line
TESTSFAILED
STOPALLTESTS CONTAINS
GUARANTEED-NOTSPAM
This would exclude any e-mail that met that
criteria from this filter and all subsequent filters.
If my understanding is correct, it would be
interesting to
Thanks for the order. It's helpful for us in optimizing the CPU
performance. We are working to put the new optimization tests at the top of
all our filter tests.
Scott, do you know where the internal Declude tests fit in the lineup? For
example: cmdspace, revdnsexists, spamdomains,
I thought i had a
handle on this SPF stuff, but i think i've got something wrong in my
understanding.
I've set up my SPF
record for our domain with the following record:
choicenet1.com
v=spf1
ip4:207.170.239.11 ip4:207.170.239.4 a mx -all
From my
understanding of this, the ip4's are
Now, my dialup customers are on a different subnet and log into our imail
server using smtp auth. When they send emails out, shouldn't the ip addy
of the email then take on the ip addy of the email server in the eyes of
the receiving mail server?
No. Otherwise, it would defeat the purpose of
1) I'd like a clarify the STOPALLTESTS action.
If I had a line
TESTSFAILEDSTOPALLTESTS CONTAINSGUARANTEED-NOTSPAM
This would exclude any e-mail that met that criteria from this filter and
all subsequent filters.
If my understanding is correct, it would be interesting to have a
No, the probem you are having is with your own mail server catching messages
from your subscribers sending mail. If you do not allow mail relay and only
auth then you can whitelist your dial up ip address of your users within
declude. Now if they are not connecting from one of your dial up ranges
R. Scott Perry wrote:
Does mail going fro muser to user in the same domain (and on the same
system) go through Declude.JunkMail?
Yes, it should (with the exception of E-mail sent by web messaging on
IMail v7 and earlier).
Thanks. I'll have to sort this out when I can get back to the
When a e-mail is forwarded, is the e-mail again processed by Declude?
John Tolmachoff
Engineer/Consultant/Owner
eServices For You
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe,
33 matches
Mail list logo
